
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier: Fgev7WjJqIqX8yzqEk26gXSbuwCJ9z/Qfw6xo2FzD98=
Subject key identifier: 80:1F:FF:CC:47:3D:75:54:5F:39:36:9E:18:DF:98:1B:FE:C9:99:55
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 019D26CDADB1393ADACD8169E925982EB9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 21:01:46 +0000
Manifest this update: Wed 25 Mar 2026 21:01:46 +0000
Manifest next update: Thu 26 Mar 2026 21:01:46 +0000
Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: csb42kw1lPBSZvRO8KberUinoyyCAL57ChkKHvtIsAY=)
3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:ad:b1:39:3a:da:cd:81:69:e9:25:98:2e:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Mar 25 21:01:46 2026 GMT
Not After : Mar 26 21:01:46 2026 GMT
Subject: CN=801fffcc473d75545f39369e18df981bfec99955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:18:ad:d2:f3:15:e1:21:9e:67:65:30:39:
31:7c:be:74:dc:c1:06:20:51:63:60:5a:64:d0:11:
b4:c0:6d:e4:f8:9d:ce:84:cc:50:5f:d1:8b:e5:42:
60:1d:e4:cc:d9:e2:82:79:8f:f4:e2:c0:70:d0:f2:
bf:54:14:f5:94:e1:6a:40:aa:fb:cf:de:d4:6c:e0:
81:18:2c:e5:04:ef:d2:e9:4f:91:f6:1b:b8:a5:46:
3b:d8:c7:41:f3:3a:cb:87:d5:2c:b1:5e:2f:7c:7a:
3c:d6:9b:31:fb:15:6f:fb:74:8c:9f:0c:78:79:17:
b3:ae:51:03:8f:03:0d:b8:71:cd:52:d3:91:b5:58:
2e:1e:88:25:0d:c1:5d:ce:fd:2e:e6:8d:61:63:cf:
a3:46:93:62:a7:ad:eb:08:84:d9:c1:64:ac:d1:50:
4c:82:7f:10:90:e3:47:56:ae:8e:73:b2:db:1a:f5:
32:50:26:88:cb:b9:cc:b0:3b:42:a3:a1:fb:28:e1:
65:33:da:e4:c9:bc:dd:0a:43:ba:ec:c8:94:bc:69:
d2:b5:f7:8b:7d:83:1c:06:68:b7:c3:87:fa:39:64:
5c:9b:b2:a5:bd:f7:7f:45:17:d9:ff:aa:a7:a9:f9:
ff:cc:5e:eb:54:5a:b2:13:ec:8d:ea:67:9b:16:30:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1F:FF:CC:47:3D:75:54:5F:39:36:9E:18:DF:98:1B:FE:C9:99:55
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2f:ce:85:e3:4d:92:d5:55:bc:87:1e:e2:73:60:b8:fc:ef:
c1:da:ee:28:e3:cb:da:fe:8f:d2:dd:2d:0a:1f:e0:06:74:53:
2d:29:df:c5:2f:1e:c2:d6:b4:4f:bb:8e:7a:89:16:3b:24:81:
3c:0c:3d:9f:05:db:f4:7c:b8:5a:50:92:08:de:11:97:e7:6f:
af:ef:5e:6e:88:6d:d6:a4:bf:b8:ef:06:a8:e1:9d:4d:9d:1b:
9a:98:b4:54:22:3a:fc:6e:36:49:3f:e5:86:5a:f9:5a:ea:00:
f8:e2:56:b4:74:10:af:fe:5f:f5:86:1a:74:7a:d9:05:ba:6f:
8d:22:d7:87:5d:b4:f6:97:a1:87:57:9e:b7:fb:87:7d:99:3e:
c6:bc:de:55:7a:26:0e:f7:81:22:e7:c8:dc:a3:cf:96:78:99:
c9:40:fd:1f:8d:e8:04:4d:89:07:72:5e:42:4b:d7:b7:e0:34:
9e:2d:2d:ed:bc:c3:99:39:09:46:c6:d8:27:10:73:2b:f4:76:
fe:e1:79:84:15:78:d8:55:72:e8:53:fe:60:ed:16:fd:3a:fa:
23:9e:6a:33:b7:a7:e4:3a:40:2e:08:df:f8:3a:b6:21:df:9a:
28:cb:cf:e8:84:85:38:3d:31:2e:7d:42:e3:3b:e1:a3:59:64:
74:14:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:43 2026 by rpki-client